last executing test programs: 9.806620917s ago: executing program 1 (id=243): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) write$binfmt_aout(r1, 0x0, 0xffffffdb) 9.718924472s ago: executing program 1 (id=245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000aa40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x20000048) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x4, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x1, 0x26d, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x3ed, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.57863894s ago: executing program 1 (id=246): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.163644474s ago: executing program 2 (id=257): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd600000001090224000100000000"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.624247006s ago: executing program 2 (id=264): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/145, 0x91}], 0x1, 0x1000, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000e00)={0x1, "ce05fb44c6930d46558076b8a8ab348993dbaac17dfde3881ac43edf79cb6596d546c06a7fad7e7e0a9f0c1b243e1f0bc1e7803960f09d16dae1e5ca2d7017f6"}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16=r3], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40840) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee5, 0x0, 0x2, 0x1f6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x420000, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20071a0000001a31fe69556866cf00e12cb1659458204c666f35b6d97d807da5"], &(0x7f0000000600)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "9a9082760df5dbfc4b08f780bda8337169a622397381f91798819b4419fa83d8492cb0ee9456935b80a7a424dfd8f31a8fd18264645edf6e4f56e447cd8b2cd8985253bd30c848b09b62d726bbc8ac799abb66fbd75b7395c167dc63ba94f4f129e3b756ca89c3cd738fc00912578eeb0da2a9bcd70a343ef8c6"}}, &(0x7f0000000280)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fffeff, 0xf00, 0x9, [0xff3f00, 0x30, 0xc0c0, 0x3f00]}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xf2f, 0xf0f, 0x8, [0x3f00, 0x30, 0xffff00, 0xc0cf, 0xc0f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "31f39e659e3e6891effbb6dad9623255"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x1, 0xf, "b7b40676", "1c0a7cee"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x5, 0x3, 0x3, 0x16, 0x3, 0xe2da}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000700)={0x40, 0xd, 0x8b, "cb5119577f8cf1a2bdfc5c01508b83164aecb7a753e7f02f0b6a18b1478f4ea36dc44df707386aadbc279c5778d0b3f3999885d70b44ee85eeb47bcb63aee789628ff2efe257e526646328ecfb1f0d766cc6a4f72af3a2bc399b6e362a12440970a969e48a3b44d71be38ee6868722627930423021f0c66f8f240d1f07cc4e76ba4818ce80d12d7a680c7f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x35}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "9a4b"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @random="ed7d1898015d"}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "c86d"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x3a}}) 6.127976516s ago: executing program 1 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240)={0x0, 0xea60}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80800) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d3}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0xc, 0x1, 0x6, 0x7ff, 0x0, 0x7fffdfff, 0x2, 0xc, 0x8, 0x2c87, 0x9, 0xfffffff7, 0x7, 0x3, 0x842, 0x26, 0x4, 0x0, 0x3ff, 0xfffffff4, 0xf9f, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x3, 0x1, 0x7, 0x8000c, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffffc, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x8, 0x6, 0x7ff, 0x7ff, 0x5, 0x9, 0xbfe, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x7fff, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f], [0x80008396, 0xb, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x4, 0xff, 0x7f, 0x400, 0x1000, 0x9, 0x6e, 0x0, 0x7, 0x5, 0x6, 0x5, 0x4, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x0, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x3c, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa62, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0x10000e, 0x2, 0x4, 0x7, 0x5, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x1, 0x3, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x6, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$tty20(0xc, 0x4, 0x1) 5.060833919s ago: executing program 1 (id=267): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)={0x10000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="e2ef7b486e", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}], 0x2, 0x4000) close(r9) r10 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.673196311s ago: executing program 1 (id=274): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.261493896s ago: executing program 2 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240)={0x0, 0xea60}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80800) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d3}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0xc, 0x1, 0x6, 0x7ff, 0x0, 0x7fffdfff, 0x2, 0xc, 0x8, 0x2c87, 0x9, 0xfffffff7, 0x7, 0x3, 0x842, 0x26, 0x4, 0x0, 0x3ff, 0xfffffff4, 0xf9f, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x3, 0x1, 0x7, 0x8000c, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffffc, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x8, 0x6, 0x7ff, 0x7ff, 0x5, 0x9, 0xbfe, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x7fff, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f], [0x80008396, 0xb, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x4, 0xff, 0x7f, 0x400, 0x1000, 0x9, 0x6e, 0x0, 0x7, 0x5, 0x6, 0x5, 0x4, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x0, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x3c, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa62, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0x10000e, 0x2, 0x4, 0x7, 0x5, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x1, 0x3, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x6, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.18469724s ago: executing program 2 (id=276): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000aa40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x20000048) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x4, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x1, 0x26d, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x3ed, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.092111295s ago: executing program 3 (id=277): unshare(0x22020400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x3016c0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) 1.965321383s ago: executing program 2 (id=278): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.965056703s ago: executing program 3 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}}) 1.741816136s ago: executing program 0 (id=280): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) 1.625939253s ago: executing program 0 (id=281): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) 1.625219353s ago: executing program 3 (id=282): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`'], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000080)=0x2) 1.468028112s ago: executing program 3 (id=283): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x0, 0x6, 0x4d, 0x39cc1919, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x8, 0x0, 0x2, 0x5, 0x7, 0x4, 0x3c5b, 0x1, 0x1fc, 0x9, 0x1, 0x78b, 0x7, 0xe661, 0x7fff, 0xd, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x3d8, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x8003e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x2, 0x1, 0x20000000, 0x200182, 0x7, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x7f, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x6, 0x8, 0x8, 0x1, 0x0, 0x2, 0x8, 0x4, 0x8000, 0x9, 0x5, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x1, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93694, 0x42, 0x400004], [0x3, 0x6, 0x81000001, 0x2, 0xff, 0x4, 0x8d2, 0x80000001, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc56, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x80000001, 0xac8, 0xc0, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x5, 0x6, 0xaaed, 0x4, 0xdf], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x0, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc7, 0xee1, 0x0, 0xffff, 0x3, 0x82, 0x100, 0x9602, 0x4, 0x6, 0xffff, 0x81, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x80, 0x4, 0x4, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.467566782s ago: executing program 0 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240)={0x0, 0xea60}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80800) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d3}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0xc, 0x1, 0x6, 0x7ff, 0x0, 0x7fffdfff, 0x2, 0xc, 0x8, 0x2c87, 0x9, 0xfffffff7, 0x7, 0x3, 0x842, 0x26, 0x4, 0x0, 0x3ff, 0xfffffff4, 0xf9f, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x3, 0x1, 0x7, 0x8000c, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffffc, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x8, 0x6, 0x7ff, 0x7ff, 0x5, 0x9, 0xbfe, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x7fff, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f], [0x80008396, 0xb, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x4, 0xff, 0x7f, 0x400, 0x1000, 0x9, 0x6e, 0x0, 0x7, 0x5, 0x6, 0x5, 0x4, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x0, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x3c, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa62, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0x10000e, 0x2, 0x4, 0x7, 0x5, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x1, 0x3, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x6, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.376821348s ago: executing program 2 (id=285): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munmap(&(0x7f000026f000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 310.728501ms ago: executing program 0 (id=286): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) 262.466774ms ago: executing program 3 (id=287): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000aa40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x20000048) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x4, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x1, 0x26d, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x3ed, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 161.85762ms ago: executing program 3 (id=288): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, 0x0, 0x0) madvise(&(0x7f0000e52000/0x2000)=nil, 0x2000, 0x17) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x1ff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r3, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x42800, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80086303, &(0x7f0000000000)) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) 158.18878ms ago: executing program 0 (id=289): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$inet(0x2, 0x80001, 0x84) close(0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r4}, &(0x7f0000000800)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r5, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 0s ago: executing program 0 (id=290): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x4}, {0x9, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3d}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001080)="03", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 69.055598][ T5755] cgroup: Unknown subsys name 'net' [ 69.190675][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.673418][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.417131][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.423708][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.233947][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.241936][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.250446][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.258517][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.266473][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.274164][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.282466][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.290669][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.298349][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.306079][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.313406][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.320571][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.321005][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.352878][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.360103][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.368994][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.377760][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.384878][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.398049][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.405198][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.419035][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.428799][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.443750][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.452918][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.797574][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 72.878813][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 72.911847][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 72.943712][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 73.033869][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.041610][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.051528][ T5767] bridge_slave_0: entered allmulticast mode [ 73.058577][ T5767] bridge_slave_0: entered promiscuous mode [ 73.068337][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.075546][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.082748][ T5767] bridge_slave_1: entered allmulticast mode [ 73.089635][ T5767] bridge_slave_1: entered promiscuous mode [ 73.181294][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.194367][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.212211][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.219828][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.229200][ T5769] bridge_slave_0: entered allmulticast mode [ 73.236055][ T5769] bridge_slave_0: entered promiscuous mode [ 73.275009][ T5767] team0: Port device team_slave_0 added [ 73.291854][ T5767] team0: Port device team_slave_1 added [ 73.307022][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.316348][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.323957][ T5769] bridge_slave_1: entered allmulticast mode [ 73.330733][ T5769] bridge_slave_1: entered promiscuous mode [ 73.357325][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.364659][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.371758][ T5770] bridge_slave_0: entered allmulticast mode [ 73.378877][ T5770] bridge_slave_0: entered promiscuous mode [ 73.405549][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.412890][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.420018][ T5768] bridge_slave_0: entered allmulticast mode [ 73.427262][ T5768] bridge_slave_0: entered promiscuous mode [ 73.435228][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.442393][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.451393][ T5770] bridge_slave_1: entered allmulticast mode [ 73.458960][ T5770] bridge_slave_1: entered promiscuous mode [ 73.476832][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.483938][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.510739][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.524631][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.536807][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.546121][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.553295][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.560553][ T5768] bridge_slave_1: entered allmulticast mode [ 73.567886][ T5768] bridge_slave_1: entered promiscuous mode [ 73.595336][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.606990][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.614091][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.640210][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.670578][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.697642][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.709690][ T5769] team0: Port device team_slave_0 added [ 73.718481][ T5769] team0: Port device team_slave_1 added [ 73.748200][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.775223][ T5770] team0: Port device team_slave_0 added [ 73.817575][ T5770] team0: Port device team_slave_1 added [ 73.839857][ T5767] hsr_slave_0: entered promiscuous mode [ 73.846465][ T5767] hsr_slave_1: entered promiscuous mode [ 73.853991][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.860938][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.887559][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.910920][ T5768] team0: Port device team_slave_0 added [ 73.919907][ T5768] team0: Port device team_slave_1 added [ 73.926953][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.933996][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.960643][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.026673][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.034189][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.061459][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.074539][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.081511][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.107573][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.127816][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.134845][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.161188][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.181919][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.189008][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.215047][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.258314][ T5769] hsr_slave_0: entered promiscuous mode [ 74.265969][ T5769] hsr_slave_1: entered promiscuous mode [ 74.272096][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.280004][ T5769] Cannot create hsr debugfs directory [ 74.339885][ T5770] hsr_slave_0: entered promiscuous mode [ 74.346530][ T5770] hsr_slave_1: entered promiscuous mode [ 74.353214][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.360769][ T5770] Cannot create hsr debugfs directory [ 74.372847][ T5768] hsr_slave_0: entered promiscuous mode [ 74.376659][ T5778] Bluetooth: hci3: command tx timeout [ 74.382779][ T5779] Bluetooth: hci1: command tx timeout [ 74.389895][ T5768] hsr_slave_1: entered promiscuous mode [ 74.396547][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.404583][ T5768] Cannot create hsr debugfs directory [ 74.532952][ T5779] Bluetooth: hci0: command tx timeout [ 74.538550][ T5779] Bluetooth: hci2: command tx timeout [ 74.788838][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.801940][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.814783][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.825199][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.886177][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.903682][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.915553][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.926138][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.987165][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.001668][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.032224][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.063334][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.109864][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.122104][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.147146][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.156466][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.250683][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.312060][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.341606][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.352225][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.370554][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.378008][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.415863][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.422988][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.441921][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.453018][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.475313][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.482465][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.502233][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.517945][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.525087][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.557006][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.586882][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.594063][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.605123][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.612265][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.621227][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.628408][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.642569][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.649750][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.138236][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.219285][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.243826][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.259032][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.309447][ T5767] veth0_vlan: entered promiscuous mode [ 76.341638][ T5767] veth1_vlan: entered promiscuous mode [ 76.389719][ T5769] veth0_vlan: entered promiscuous mode [ 76.400152][ T5770] veth0_vlan: entered promiscuous mode [ 76.430923][ T5770] veth1_vlan: entered promiscuous mode [ 76.441865][ T5768] veth0_vlan: entered promiscuous mode [ 76.451177][ T5769] veth1_vlan: entered promiscuous mode [ 76.457199][ T5779] Bluetooth: hci1: command tx timeout [ 76.463725][ T5778] Bluetooth: hci3: command tx timeout [ 76.476586][ T5767] veth0_macvtap: entered promiscuous mode [ 76.486584][ T5767] veth1_macvtap: entered promiscuous mode [ 76.520010][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.530001][ T5768] veth1_vlan: entered promiscuous mode [ 76.559710][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.570617][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.580280][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.589602][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.598468][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.613048][ T5778] Bluetooth: hci0: command tx timeout [ 76.617135][ T5779] Bluetooth: hci2: command tx timeout [ 76.624075][ T5770] veth0_macvtap: entered promiscuous mode [ 76.642121][ T5770] veth1_macvtap: entered promiscuous mode [ 76.690557][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.703704][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.715465][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.731765][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.750614][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.761814][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.788199][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800628][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809916][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.818833][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.843306][ T5768] veth0_macvtap: entered promiscuous mode [ 76.882472][ T5768] veth1_macvtap: entered promiscuous mode [ 76.889694][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.901993][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.905973][ T5769] veth0_macvtap: entered promiscuous mode [ 76.939099][ T5769] veth1_macvtap: entered promiscuous mode [ 76.945232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.958873][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.975440][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.986117][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.996302][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.006823][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.019174][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.055402][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.068730][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.078632][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.089467][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.105526][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.130836][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.152892][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.165393][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.176688][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.187045][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.197587][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.209267][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.221972][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.232717][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.243624][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.255142][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.265040][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.276501][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.287754][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.305288][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.314457][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323831][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.334742][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.441575][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.456393][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466343][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481420][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.519617][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.528728][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.563616][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 77.605108][ T5855] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5'. [ 77.621258][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.630768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.644712][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.652046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.738652][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.762325][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.811990][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.879511][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.911711][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.997983][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.038876][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.102947][ T5864] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.265251][ T5867] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 78.508806][ T5873] syzkaller0: entered promiscuous mode [ 78.516399][ T5873] syzkaller0: entered allmulticast mode [ 78.534188][ T5779] Bluetooth: hci3: command tx timeout [ 78.535231][ T5778] Bluetooth: hci1: command tx timeout [ 78.693336][ T5778] Bluetooth: hci2: command tx timeout [ 78.703344][ T5778] Bluetooth: hci0: command tx timeout [ 78.807178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 78.816484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.993570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.126120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.313133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.322097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.343344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.353804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.543060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.592851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.604426][ T5885] syz.3.12[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.723562][ T5885] process 'syz.3.12' launched '/dev/fd/9' with NULL argv: empty string added [ 80.612905][ T5778] Bluetooth: hci3: command tx timeout [ 80.612919][ T5779] Bluetooth: hci1: command tx timeout [ 80.773295][ T5778] Bluetooth: hci0: command tx timeout [ 80.773308][ T5779] Bluetooth: hci2: command tx timeout [ 80.915209][ T5777] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 80.973228][ T5777] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 80.980702][ T5777] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 81.009757][ T5777] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 81.232823][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.507034][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 81.600187][ T5851] usb 2-1: config 0 has no interfaces? [ 81.627626][ T5851] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 81.764706][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.849602][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.929802][ T5851] usb 2-1: config 0 descriptor?? [ 83.956470][ T5851] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.214881][ T5851] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.266817][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.288259][ T5851] usb 3-1: Product: syz [ 84.306654][ T5851] usb 3-1: Manufacturer: syz [ 84.321978][ T5851] usb 3-1: SerialNumber: syz [ 84.327148][ T5757] usb 2-1: USB disconnect, device number 2 [ 84.341512][ T5851] usb 3-1: config 0 descriptor?? [ 84.559304][ T5851] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 85.483721][ T5956] capability: warning: `syz.1.28' uses 32-bit capabilities (legacy support in use) [ 85.623422][ T5956] input: syz0 as /devices/virtual/input/input5 [ 86.812884][ T968] cfg80211: failed to load regulatory.db [ 87.028810][ T5851] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 87.042064][ T5851] usb 3-1: USB disconnect, device number 2 [ 87.379304][ T28] audit: type=1326 audit(1769150838.641:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.466792][ T28] audit: type=1326 audit(1769150838.671:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.518278][ T28] audit: type=1326 audit(1769150838.671:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.575516][ T28] audit: type=1326 audit(1769150838.681:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.601327][ T28] audit: type=1326 audit(1769150838.681:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.677367][ T28] audit: type=1326 audit(1769150838.681:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.782764][ T5777] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.820912][ T28] audit: type=1326 audit(1769150838.691:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 87.924779][ T28] audit: type=1326 audit(1769150838.691:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 88.033079][ T5777] usb 2-1: Using ep0 maxpacket: 16 [ 88.070441][ T28] audit: type=1326 audit(1769150838.691:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 88.108197][ T5777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.121605][ T5777] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 88.140516][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.148674][ T28] audit: type=1326 audit(1769150838.691:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bfd9acb9 code=0x7ffc0000 [ 88.186110][ T5777] usb 2-1: config 0 descriptor?? [ 88.520865][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 88.532028][ T5996] input: syz0 as /devices/virtual/input/input6 [ 88.646465][ T5998] batadv_slave_1: entered promiscuous mode [ 89.169705][ T5993] batadv_slave_1: left promiscuous mode [ 89.239052][ T5997] tty tty25: ldisc open failed (-12), clearing slot 24 [ 89.902678][ T5819] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.087755][ T5819] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 90.132574][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.160953][ T5819] usb 3-1: Product: syz [ 90.176750][ T5819] usb 3-1: Manufacturer: syz [ 90.188055][ T5819] usb 3-1: SerialNumber: syz [ 90.209692][ T5819] usb 3-1: config 0 descriptor?? [ 90.241282][ T5819] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 90.526384][ T6007] Zero length message leads to an empty skb [ 91.211267][ T5777] usbhid 2-1:0.0: can't add hid device: -71 [ 91.231938][ T5777] usbhid: probe of 2-1:0.0 failed with error -71 [ 91.282236][ T5777] usb 2-1: USB disconnect, device number 3 [ 91.383975][ T5819] gspca_sunplus: reg_r err -71 [ 91.393349][ T5819] sunplus: probe of 3-1:0.0 failed with error -71 [ 91.412138][ T5819] usb 3-1: USB disconnect, device number 3 [ 91.666177][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 91.692694][ T6028] nbd: must specify at least one socket [ 92.223250][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 92.304224][ T6036] vlan2: entered promiscuous mode [ 92.334674][ T6036] syz_tun: entered promiscuous mode [ 95.155951][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 95.180002][ T6070] vlan2: entered promiscuous mode [ 95.186477][ T6070] syz_tun: entered promiscuous mode [ 95.382883][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.588185][ T6072] could not allocate digest TFM handle [ 95.597307][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.611411][ T5819] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.661096][ T5819] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 95.680507][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.763120][ T5819] usb 2-1: config 0 descriptor?? [ 96.070373][ T6088] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 96.114227][ T968] usb 2-1: USB disconnect, device number 4 [ 96.351486][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 96.652680][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 96.665076][ T6102] input: syz0 as /devices/virtual/input/input7 [ 96.812562][ T6102] batadv_slave_1: entered promiscuous mode [ 97.320160][ T6099] batadv_slave_1: left promiscuous mode [ 97.493064][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.522485][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 98.943069][ T6136] input: syz0 as /devices/virtual/input/input8 [ 99.550668][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 99.559609][ T6136] batadv_slave_1: entered promiscuous mode [ 99.566094][ T6137] batadv_slave_1: left promiscuous mode [ 100.172733][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.397197][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.423507][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.450825][ T27] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 100.465034][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.482771][ T27] usb 3-1: config 0 descriptor?? [ 100.789620][ T5819] usb 3-1: USB disconnect, device number 4 [ 100.899892][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 100.924104][ T6166] input: syz0 as /devices/virtual/input/input9 [ 100.954270][ T6166] batadv_slave_1: entered promiscuous mode [ 101.455446][ T6156] batadv_slave_1: left promiscuous mode [ 101.490019][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 102.493189][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 102.504788][ T6203] input: syz0 as /devices/virtual/input/input10 [ 102.530661][ T6203] batadv_slave_1: entered promiscuous mode [ 103.154183][ T6197] batadv_slave_1: left promiscuous mode [ 103.755655][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 103.794642][ T6215] vlan2: entered promiscuous mode [ 103.816238][ T6215] ip6gretap0: entered promiscuous mode [ 104.133506][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 104.404226][ T6221] nbd: must specify at least one socket [ 104.695571][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 104.713789][ T6231] input: syz0 as /devices/virtual/input/input11 [ 104.755438][ T6231] batadv_slave_1: entered promiscuous mode [ 105.094767][ T6222] batadv_slave_1: left promiscuous mode [ 106.207482][ T5819] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.424762][ T6258] input: syz0 as /devices/virtual/input/input12 [ 106.968218][ T5819] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.982688][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.991049][ T5819] usb 2-1: Product: syz [ 107.003212][ T5819] usb 2-1: Manufacturer: syz [ 107.008106][ T5819] usb 2-1: SerialNumber: syz [ 107.025991][ T5819] usb 2-1: config 0 descriptor?? [ 107.026719][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 107.040455][ T6258] batadv_slave_1: entered promiscuous mode [ 107.046877][ T6259] batadv_slave_1: left promiscuous mode [ 107.345589][ T5819] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.857634][ T6272] vlan3: entered promiscuous mode [ 107.875152][ T6272] ip6gretap0: entered promiscuous mode [ 108.362672][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.554573][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.580837][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.617877][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 108.649316][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.669811][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.683155][ T6278] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.697991][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 108.705896][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 108.719639][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 108.728870][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 108.747014][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 108.756930][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 108.921290][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e327000: rx timeout, send abort [ 109.037635][ T5819] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 109.048099][ T5819] usb 2-1: USB disconnect, device number 5 [ 109.325750][ T6278] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 109.421614][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e327800: rx timeout, send abort [ 109.430795][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e327000: abort rx timeout. Force session deactivation [ 109.517867][ T6306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.530864][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.537708][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.544767][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.551416][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.557804][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.564455][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.571079][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.577723][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.584299][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.590952][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.597366][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.604049][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.610438][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.617069][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.623400][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 109.630032][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 109.636224][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 109.867862][ T968] usb 1-1: USB disconnect, device number 2 [ 109.930020][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e327800: abort rx timeout. Force session deactivation [ 110.060515][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 110.082426][ T6317] input: syz0 as /devices/virtual/input/input13 [ 110.871326][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'. [ 111.398582][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.662686][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.752463][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 111.775700][ T6364] input: syz0 as /devices/virtual/input/input14 [ 111.940762][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.070223][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.352671][ T27] usb 2-1: Product: syz [ 112.357134][ T27] usb 2-1: Manufacturer: syz [ 112.363115][ T27] usb 2-1: SerialNumber: syz [ 112.441383][ T27] usb 2-1: config 0 descriptor?? [ 112.586844][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.605874][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.622895][ T8] usb 4-1: Product: syz [ 112.632083][ T8] usb 4-1: Manufacturer: syz [ 112.640362][ T8] usb 4-1: SerialNumber: syz [ 112.652445][ T27] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.666614][ T8] usb 4-1: config 0 descriptor?? [ 112.920643][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.053061][ T6379] vlan2: entered promiscuous mode [ 114.063138][ T6379] ip6gretap0: entered promiscuous mode [ 114.399513][ T27] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 114.427931][ T27] usb 2-1: USB disconnect, device number 6 [ 114.476574][ T6372] pimreg: entered allmulticast mode [ 114.818774][ T6368] pimreg: left allmulticast mode [ 114.963861][ T8] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 114.985513][ T8] usb 4-1: USB disconnect, device number 2 [ 115.674343][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 115.685607][ T6404] input: syz0 as /devices/virtual/input/input15 [ 118.002551][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 118.014093][ T6439] input: syz0 as /devices/virtual/input/input16 [ 119.053186][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 119.062297][ T6445] nbd: must specify at least one socket [ 119.097247][ T6443] tipc: Started in network mode [ 119.102455][ T6443] tipc: Node identity 4a194261e7ad, cluster identity 4711 [ 119.153050][ T6443] tipc: Enabled bearer , priority 0 [ 119.216947][ T6442] tipc: Disabling bearer [ 120.915146][ T6473] input: syz0 as /devices/virtual/input/input17 [ 121.592197][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.600912][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.073641][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.119546][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.465760][ T6461] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.477589][ T6461] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.487786][ T6461] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.499930][ T6461] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.597722][ T6461] vlan2: left promiscuous mode [ 122.602796][ T6461] syz_tun: left promiscuous mode [ 122.615455][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 122.634157][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 122.744601][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 123.592674][ T5832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.812002][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 123.824484][ T6532] input: syz0 as /devices/virtual/input/input18 [ 124.882850][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 124.911143][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.932160][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 124.955102][ T5832] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 124.988472][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.017007][ T5832] usb 1-1: Product: syz [ 125.027097][ T5832] usb 1-1: Manufacturer: syz [ 125.031760][ T5832] usb 1-1: SerialNumber: syz [ 125.127624][ T5832] usb 1-1: config 0 descriptor?? [ 125.797820][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 125.809977][ T6558] input: syz0 as /devices/virtual/input/input19 [ 126.768592][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 126.892764][ T6499] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 126.975930][ T6569] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 127.043291][ T6570] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 127.081819][ T6567] block device autoloading is deprecated and will be removed. [ 127.136419][ T6499] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.148280][ T6499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.167679][ T6499] usb 3-1: Product: syz [ 127.171979][ T6499] usb 3-1: Manufacturer: syz [ 127.180475][ T6499] usb 3-1: SerialNumber: syz [ 127.187763][ T6499] usb 3-1: config 0 descriptor?? [ 127.194176][ T6571] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 127.202263][ T5819] usb 1-1: USB disconnect, device number 3 [ 127.308594][ T6567] warning: `syz.1.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.325619][ T6567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.425851][ T6499] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.502938][ T6575] syzkaller0: entered promiscuous mode [ 127.526562][ T6575] syzkaller0: entered allmulticast mode [ 128.263490][ T968] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.458636][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.487960][ T968] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.499767][ T968] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 128.509048][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.532159][ T968] usb 1-1: config 0 descriptor?? [ 128.756999][ T6490] usb 1-1: USB disconnect, device number 4 [ 128.773316][ T6599] syzkaller0: entered promiscuous mode [ 128.780041][ T6599] syzkaller0: entered allmulticast mode [ 129.073616][ T6499] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 129.094525][ T6499] usb 3-1: USB disconnect, device number 5 [ 129.140978][ T6608] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 129.152685][ T968] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.208670][ T6609] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 129.261242][ T6608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.347042][ T968] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.368983][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.397243][ T968] usb 2-1: Product: syz [ 129.407125][ T968] usb 2-1: Manufacturer: syz [ 129.414686][ T968] usb 2-1: SerialNumber: syz [ 129.443370][ T968] usb 2-1: config 0 descriptor?? [ 129.681440][ T968] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.662675][ T5850] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.865131][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.902777][ T5850] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.939924][ T5850] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 130.949846][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.963556][ T5850] usb 3-1: config 0 descriptor?? [ 131.235262][ T5850] usb 3-1: USB disconnect, device number 6 [ 131.709940][ T968] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 131.737116][ T968] usb 2-1: USB disconnect, device number 7 [ 132.225572][ T5850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.531389][ T5850] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.542738][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.557856][ T5850] usb 3-1: Product: syz [ 132.617569][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 132.628790][ T6655] input: syz0 as /devices/virtual/input/input20 [ 132.858835][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933413][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.373543][ T5850] usb 3-1: Manufacturer: syz [ 133.395251][ T5850] usb 3-1: SerialNumber: syz [ 133.434352][ T5850] usb 3-1: config 0 descriptor?? [ 133.457567][ T5850] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 134.562590][ T968] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.602037][ T6499] usb 3-1: USB disconnect, device number 7 [ 134.649407][ T6677] ptrace attach of "./syz-executor exec"[5770] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ"[6677] [ 134.816949][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.843676][ T968] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.864415][ T968] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 134.875971][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.887128][ T968] usb 4-1: config 0 descriptor?? [ 135.102425][ T6499] usb 4-1: USB disconnect, device number 3 [ 135.142617][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 135.461298][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 135.472365][ T6684] input: syz0 as /devices/virtual/input/input21 [ 136.235830][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.245249][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.254166][ T9] usb 2-1: Product: syz [ 136.258442][ T9] usb 2-1: Manufacturer: syz [ 136.263642][ T9] usb 2-1: SerialNumber: syz [ 136.270834][ T9] usb 2-1: config 0 descriptor?? [ 136.522758][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.332403][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 137.348233][ T6711] input: syz0 as /devices/virtual/input/input22 [ 138.476375][ T6725] syzkaller0: entered promiscuous mode [ 138.486223][ T6725] syzkaller0: entered allmulticast mode [ 138.506224][ T6725] ------------[ cut here ]------------ [ 138.512035][ T6725] WARNING: CPU: 0 PID: 6725 at include/linux/skbuff.h:2871 em_nbyte_match+0x2d0/0x3e0 [ 138.521690][ T6725] Modules linked in: [ 138.525638][ T6725] CPU: 0 PID: 6725 Comm: syz.0.290 Not tainted syzkaller #0 [ 138.532961][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.543050][ T6725] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 138.548512][ T6725] Code: c0 eb 07 e8 b2 ab d5 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9c ab d5 f8 0f 0b e9 e5 fe ff ff e8 90 ab d5 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 138.568184][ T6725] RSP: 0018:ffffc90004aff118 EFLAGS: 00010287 [ 138.574283][ T6725] RAX: ffffffff88b16790 RBX: ffff888030662c80 RCX: 0000000000080000 [ 138.582294][ T6725] RDX: ffffc9000cad9000 RSI: 00000000000007a8 RDI: 00000000000007a9 [ 138.590352][ T6725] RBP: 000000000000ffff R08: ffff888018ba0000 R09: 0000000000000003 [ 138.598444][ T6725] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 138.606481][ T6725] R13: 1ffff110060cc5a6 R14: ffff88805f17bcd0 R15: 1ffff1100be2f79a [ 138.614513][ T6725] FS: 00007f19ad4666c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.623505][ T6725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.630120][ T6725] CR2: 0000001b2d81dff8 CR3: 000000007db9c000 CR4: 00000000003506f0 [ 138.638155][ T6725] Call Trace: [ 138.641668][ T6725] [ 138.644693][ T6725] __tcf_em_tree_match+0x1cf/0x7a0 [ 138.649862][ T6725] ? tcf_em_tree_dump+0x900/0x900 [ 138.654975][ T6725] basic_classify+0x115/0x2d0 [ 138.659741][ T6725] tcf_classify+0x4c4/0xeb0 [ 138.664357][ T6725] multiq_enqueue+0x103/0x4c0 [ 138.669073][ T6725] ? sch_tree_unlock+0x1b0/0x1b0 [ 138.674086][ T6725] ? do_raw_spin_lock+0x11f/0x2c0 [ 138.679160][ T6725] ? __rwlock_init+0x150/0x150 [ 138.684005][ T6725] dev_qdisc_enqueue+0x48/0x220 [ 138.688896][ T6725] ? __dev_queue_xmit+0xd3b/0x36b0 [ 138.694076][ T6725] __dev_queue_xmit+0xea8/0x36b0 [ 138.699061][ T6725] ? __dev_queue_xmit+0x26b/0x36b0 [ 138.704265][ T6725] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 138.709734][ T6725] ? netdev_core_pick_tx+0x340/0x340 [ 138.715148][ T6725] ? packet_parse_headers+0x85e/0xac0 [ 138.720560][ T6725] ? __virt_addr_valid+0x18c/0x540 [ 138.725780][ T6725] ? __check_object_size+0x506/0xa20 [ 138.731123][ T6725] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 138.736762][ T6725] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 138.742814][ T6725] ? packet_xmit+0x66/0x330 [ 138.747376][ T6725] ? packet_sendmsg+0x3a37/0x4d70 [ 138.752474][ T6725] packet_sendmsg+0x3b7a/0x4d70 [ 138.757433][ T6725] ? verify_lock_unused+0x140/0x140 [ 138.762705][ T6725] ? finish_task_switch+0x265/0x8f0 [ 138.767939][ T6725] ? verify_lock_unused+0x140/0x140 [ 138.773209][ T6725] ? aa_sk_perm+0x83c/0x970 [ 138.777754][ T6725] ? packet_getsockopt+0xad0/0xad0 [ 138.782959][ T6725] ? aa_sock_msg_perm+0x94/0x150 [ 138.787984][ T6725] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.793356][ T6725] ? security_socket_sendmsg+0x80/0xa0 [ 138.798863][ T6725] ? packet_getsockopt+0xad0/0xad0 [ 138.804060][ T6725] ____sys_sendmsg+0x5ba/0x960 [ 138.808949][ T6725] ? __lock_acquire+0x7d40/0x7d40 [ 138.814080][ T6725] ? __asan_memset+0x22/0x40 [ 138.818720][ T6725] ? __sys_sendmsg_sock+0x30/0x30 [ 138.823830][ T6725] ? __import_iovec+0x5f2/0x850 [ 138.828744][ T6725] ? import_iovec+0x73/0xa0 [ 138.833330][ T6725] ___sys_sendmsg+0x2a6/0x360 [ 138.838084][ T6725] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.842970][ T6725] __se_sys_sendmsg+0x1c2/0x2b0 [ 138.847871][ T6725] ? __x64_sys_sendmsg+0x80/0x80 [ 138.852919][ T6725] ? lockdep_hardirqs_on+0x98/0x150 [ 138.858156][ T6725] do_syscall_64+0x55/0xa0 [ 138.862639][ T6725] ? clear_bhb_loop+0x40/0x90 [ 138.867358][ T6725] ? clear_bhb_loop+0x40/0x90 [ 138.872077][ T6725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.878045][ T6725] RIP: 0033:0x7f19ac59acb9 [ 138.882550][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.902234][ T6725] RSP: 002b:00007f19ad466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.910717][ T6725] RAX: ffffffffffffffda RBX: 00007f19ac815fa0 RCX: 00007f19ac59acb9 [ 138.918752][ T6725] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 138.926790][ T6725] RBP: 00007f19ac608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 138.934848][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.942905][ T6725] R13: 00007f19ac816038 R14: 00007f19ac815fa0 R15: 00007ffcbbccead8 [ 138.950922][ T6725] [ 138.954014][ T6725] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.961321][ T6725] CPU: 0 PID: 6725 Comm: syz.0.290 Not tainted syzkaller #0 [ 138.968655][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.978752][ T6725] Call Trace: [ 138.982064][ T6725] [ 138.985021][ T6725] dump_stack_lvl+0x18c/0x250 [ 138.989757][ T6725] ? show_regs_print_info+0x20/0x20 [ 138.995011][ T6725] ? load_image+0x400/0x400 [ 138.999564][ T6725] panic+0x2dc/0x730 [ 139.003493][ T6725] ? bpf_jit_dump+0xd0/0xd0 [ 139.008056][ T6725] __warn+0x2e0/0x470 [ 139.012093][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.016982][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.021878][ T6725] report_bug+0x2be/0x4f0 [ 139.026244][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.031131][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.036010][ T6725] ? em_nbyte_match+0x2d2/0x3e0 [ 139.040884][ T6725] handle_bug+0xcf/0x120 [ 139.045159][ T6725] exc_invalid_op+0x1a/0x50 [ 139.049696][ T6725] asm_exc_invalid_op+0x1a/0x20 [ 139.054590][ T6725] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 139.060076][ T6725] Code: c0 eb 07 e8 b2 ab d5 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9c ab d5 f8 0f 0b e9 e5 fe ff ff e8 90 ab d5 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 139.079713][ T6725] RSP: 0018:ffffc90004aff118 EFLAGS: 00010287 [ 139.085813][ T6725] RAX: ffffffff88b16790 RBX: ffff888030662c80 RCX: 0000000000080000 [ 139.093814][ T6725] RDX: ffffc9000cad9000 RSI: 00000000000007a8 RDI: 00000000000007a9 [ 139.101813][ T6725] RBP: 000000000000ffff R08: ffff888018ba0000 R09: 0000000000000003 [ 139.109820][ T6725] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 139.117827][ T6725] R13: 1ffff110060cc5a6 R14: ffff88805f17bcd0 R15: 1ffff1100be2f79a [ 139.125846][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.130731][ T6725] ? em_nbyte_match+0x2d0/0x3e0 [ 139.135609][ T6725] __tcf_em_tree_match+0x1cf/0x7a0 [ 139.140763][ T6725] ? tcf_em_tree_dump+0x900/0x900 [ 139.145839][ T6725] basic_classify+0x115/0x2d0 [ 139.150552][ T6725] tcf_classify+0x4c4/0xeb0 [ 139.155094][ T6725] multiq_enqueue+0x103/0x4c0 [ 139.159810][ T6725] ? sch_tree_unlock+0x1b0/0x1b0 [ 139.164772][ T6725] ? do_raw_spin_lock+0x11f/0x2c0 [ 139.169887][ T6725] ? __rwlock_init+0x150/0x150 [ 139.174686][ T6725] dev_qdisc_enqueue+0x48/0x220 [ 139.179570][ T6725] ? __dev_queue_xmit+0xd3b/0x36b0 [ 139.184718][ T6725] __dev_queue_xmit+0xea8/0x36b0 [ 139.189685][ T6725] ? __dev_queue_xmit+0x26b/0x36b0 [ 139.194842][ T6725] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 139.200245][ T6725] ? netdev_core_pick_tx+0x340/0x340 [ 139.205560][ T6725] ? packet_parse_headers+0x85e/0xac0 [ 139.210967][ T6725] ? __virt_addr_valid+0x18c/0x540 [ 139.216117][ T6725] ? __check_object_size+0x506/0xa20 [ 139.221436][ T6725] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 139.227041][ T6725] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 139.233063][ T6725] ? packet_xmit+0x66/0x330 [ 139.237596][ T6725] ? packet_sendmsg+0x3a37/0x4d70 [ 139.242671][ T6725] packet_sendmsg+0x3b7a/0x4d70 [ 139.247574][ T6725] ? verify_lock_unused+0x140/0x140 [ 139.252801][ T6725] ? finish_task_switch+0x265/0x8f0 [ 139.258026][ T6725] ? verify_lock_unused+0x140/0x140 [ 139.263276][ T6725] ? aa_sk_perm+0x83c/0x970 [ 139.267832][ T6725] ? packet_getsockopt+0xad0/0xad0 [ 139.272993][ T6725] ? aa_sock_msg_perm+0x94/0x150 [ 139.277957][ T6725] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.283272][ T6725] ? security_socket_sendmsg+0x80/0xa0 [ 139.288751][ T6725] ? packet_getsockopt+0xad0/0xad0 [ 139.293902][ T6725] ____sys_sendmsg+0x5ba/0x960 [ 139.298699][ T6725] ? __lock_acquire+0x7d40/0x7d40 [ 139.303754][ T6725] ? __asan_memset+0x22/0x40 [ 139.308387][ T6725] ? __sys_sendmsg_sock+0x30/0x30 [ 139.313477][ T6725] ? __import_iovec+0x5f2/0x850 [ 139.318371][ T6725] ? import_iovec+0x73/0xa0 [ 139.322915][ T6725] ___sys_sendmsg+0x2a6/0x360 [ 139.327633][ T6725] ? __sys_sendmsg+0x2a0/0x2a0 [ 139.332474][ T6725] __se_sys_sendmsg+0x1c2/0x2b0 [ 139.337360][ T6725] ? __x64_sys_sendmsg+0x80/0x80 [ 139.342359][ T6725] ? lockdep_hardirqs_on+0x98/0x150 [ 139.347600][ T6725] do_syscall_64+0x55/0xa0 [ 139.352067][ T6725] ? clear_bhb_loop+0x40/0x90 [ 139.356794][ T6725] ? clear_bhb_loop+0x40/0x90 [ 139.361505][ T6725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.367432][ T6725] RIP: 0033:0x7f19ac59acb9 [ 139.371876][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.391518][ T6725] RSP: 002b:00007f19ad466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.399957][ T6725] RAX: ffffffffffffffda RBX: 00007f19ac815fa0 RCX: 00007f19ac59acb9 [ 139.407961][ T6725] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 139.415953][ T6725] RBP: 00007f19ac608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 139.423946][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.431936][ T6725] R13: 00007f19ac816038 R14: 00007f19ac815fa0 R15: 00007ffcbbccead8 [ 139.439965][ T6725] [ 139.443575][ T6725] Kernel Offset: disabled [ 139.447965][ T6725] Rebooting in 86400 seconds..